I kept getting 403/denied errors after installing mod_evasive on my ubuntu 10.10/ISPConfig 3 setup. Basically, I was getting blocked for 10 seconds (the default blocking period) whenever I clicked too many links too quickly in ISPConfig. After some tweaking, I have a config that still protects it, but doesn't blockout real/normal users.
Here's the full mod_evasive install and working config (it's google bot safe):
Code:
> apt-get install libapache2-mod-evasive
> mkdir -p /var/log/apache2/evasive chown -R www-data:root /var/log/apache2/evasive
> nano /etc/apache2/mods-available/mod-evasive.load
And add make it look like so:
Code:
LoadModule evasive20_module /usr/lib/apache2/modules/mod_evasive20.so
<IfModule mod_evasive20.c>
DOSHashTableSize 2048
DOSPageCount 10
DOSSiteCount 200
DOSPageInterval 2
DOSSiteInterval 2
DOSBlockingPeriod 10
DOSCloseSocket On
DOSLogDir "/var/log/apache2/evasive"
DOSEmailNotify you@email.com
</IfModule>
Then restart apache
Code:
/etc/init.d/apache2 restart
Recent comments
10 hours 49 min ago
17 hours 30 min ago
21 hours 21 min ago
22 hours 59 min ago
1 day 7 hours ago
1 day 16 hours ago
1 day 17 hours ago
1 day 21 hours ago
2 days 1 hour ago
2 days 2 hours ago